CVE-2011-3343
Multiple buffer overflows in OpenTTD before 1.1.3 allow local users to cause a denial of service ...
Multiple buffer overflows in OpenTTD before 1.1.3 allow local users to cause a denial of service (daemon crash) or possibly gain privileges via (1) a crafted BMP file with RLE compression or (2) crafted dimensions in a BMP file.
Exploit likelihood
What each source reports
NVD Score used
Multiple buffer overflows in OpenTTD before 1.1.3 allow local users to cause a denial of service (daemon crash) or possibly gain privileges via (1) a crafted BMP file with RLE compression or (2) crafted dimensions in a BMP file.
- Record
CVE-2011-3343- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Multiple buffer overflows in OpenTTD before 1.1.3 allow local users to cause a denial of service (daemon crash) or possibly gain privileges via (1) a crafted BMP file with RLE compression or (2) crafted dimensions in a BMP file.
- Record
CVE-2011-3343- Updated
- 2026-11-02
EUVDEUVD-2011-3307 No score
Multiple buffer overflows in OpenTTD before 1.1.3 allow local users to cause a denial of service (daemon crash) or possibly gain privileges via (1) a crafted BMP file with RLE compression or (2) crafted dimensions in a BMP file.
- Record
EUVD-2011-3307- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mxq9-6r68-9fc6 No score
Multiple buffer overflows in OpenTTD before 1.1.3 allow local users to cause a denial of service ...
Multiple buffer overflows in OpenTTD before 1.1.3 allow local users to cause a denial of service (daemon crash) or possibly gain privileges via (1) a crafted BMP file with RLE compression or (2) crafted dimensions in a BMP file.
- Record
GHSA-mxq9-6r68-9fc6- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Multiple buffer overflows in OpenTTD before 1.1.3 allow local users to cause a denial of service (daemon crash) or possibly gain privileges via (1) a crafted BMP file with RLE compression or (2) crafted dimensions in a BMP file.
- Record
CVE-2011-3343- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-3343 No score
Multiple buffer overflows in OpenTTD before 1.1.3 allow local users to cause a denial of service (daemon crash) or possibly gain privileges via (1) a crafted BMP file with RLE compression or (2) crafted dimensions in a BMP file.
- Record
DEBIAN-CVE-2011-3343- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openttdDebian:12 |
before 1.1.3-1 | 1.1.3-1 |
openttdDebian:13 |
before 1.1.3-1 | 1.1.3-1 |
openttdDebian:14 |
before 1.1.3-1 | 1.1.3-1 |
openttdDebian:5.0 |
before 0.6.2-1+lenny4, plus listed versions 0.5.0-20.5.1-10.5.2-10.5.3-10.6.0-1 Show 7 moreShow less0.6.0-20.6.1-10.6.2-10.6.2-1+lenny10.6.2-1+lenny20.6.2~rc1-10.6.2~rc2-1 |
0.6.2-1+lenny4 |
openttdDebian:6.0 |
before 1.0.4-4, plus listed versions 1.0.4-3 |
1.0.4-4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-3343 is a medium vulnerability (CVSS 4.6) in Openttd, published September 8, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 32nd percentile. Fixed in openttd 1.1.3-1.